firebase-admin-edge 1.0.22 → 1.0.24

package/README.md

@@ -23,9 +23,12 @@ npm i firebase-admin-edge
 ### Basic setup
 
 ```typescript
-import { createFirebaseEdgeServer } from 'firebase-admin-edge';
+import { createFirebaseEdgeServer, TokenCache } from 'firebase-admin-edge';
 import { getCookie, setCookie } from 'your-framework-library';
 
+// Optional: Create a cache for service account tokens (recommended for performance)
+const cache = new TokenCache();
+
 // Create the edge server once during initialization. Keep secrets out of
 // source control — load the `serviceAccount` and client secrets from
 // environment variables or a secret manager.
@@ -44,6 +47,10 @@ export const firebaseServer = createFirebaseEdgeServer({
         google: {
             client_id: 'your-google-oauth-client-id',
             client_secret: 'your-google-oauth-client-secret'
+        },
+        github: {
+            client_id: 'your-github-oauth-client-id',
+            client_secret: 'your-github-oauth-client-secret'
         }
     },
     cookies: {
@@ -51,8 +58,27 @@ export const firebaseServer = createFirebaseEdgeServer({
         getSession: (name) => getCookie(name),
         saveSession: (name, value, options) => setCookie(name, value, options)
     },
+    // Optional: Token caching for improved performance (tokens cached for 1 hour)
+    cache: {
+        getCache: (name) => cache.get(name),
+        setCache: (name, value, ttl) => cache.set(name, value, ttl)
+    },
+    // Optional: Custom session cookie name (defaults to '__session')
+    cookieName: '__session',
+    // Optional: Custom cookie options
+    cookieOptions: {
+        httpOnly: true,
+        secure: true,
+        sameSite: 'lax',
+        path: '/',
+        maxAge: 60 * 60 * 24 * 5 // 5 days
+    },
     // OAuth callback URL (registered with your provider)
-    redirectUri: 'https://example.com/auth/callback'
+    redirectUri: 'https://example.com/auth/callback',
+    // Optional: Tenant ID for multi-tenancy
+    tenantId: 'your-tenant-id',
+    // Optional: Automatically link accounts with same email
+    autoLinkProviders: false
 });
 ```
 
@@ -99,29 +125,41 @@ redirect(302, '/');
 - ✅ **Zero Dependencies** - Uses only fetch API and jose
 - ✅ **TypeScript Support** - Full type safety and IntelliSense
 - ✅ **Session Management** - Secure HTTP-only cookies
-- ✅ **Google OAuth** - Complete OAuth 2.0 flow
+- ✅ **OAuth Support** - Google and GitHub OAuth 2.0 flows
 - ✅ **Token Management** - Generate client tokens from server sessions
-
-## Currently Working On - (in no particular order)
-
-- ☐ LinkProvider (auto link?)
-- ☐ Unlink Provider
-- ☐ App Check
-- ☐ Magic Link (auto save email?)
-- ☐ Email / Password
-- ☐ Custom oAuth Scopes
-- ☐ Get User
+- ✅ **Token Caching** - Optional caching for service account tokens (1-hour TTL)
+- ✅ **Multi-Tenancy** - Support for Firebase Auth tenant IDs
+- ✅ **Flexible Configuration** - Customizable cookie options and cache implementations
+
+## Firebase Auth Todo
+
+- ☐ Magic Link Login (auto save email option)
+- ☐ Link and Unlink Providers
+- ☐ Email / Password / Annonymous Login
+- ☐ Reset Password
+- ☐ Change Email
+- ☐ Get User By ID
+- ☐ Get All Users with Order By and Pagination
+- ☐ Create User
+- ☐ Delete
 - ☐ Update User
-- ☐ Delete User
 - ☐ Add / Remove Custom Claims
-- ☐ Get all Users / Pagination
-- ☐ All Providers
+- ☐ Disable User (Ban User)
+- ☐ Add All Providers
+- ☐ Add App Check
 - ☐ Ban Users
 - ☐ RBAC
 
-### Other TODO Notes
+## Firestore Todo
+
+- ☐ Get Document By ID
+- ☐ Create Document
+- ☐ Update Document (merge option)
+- ☐ Delete Document
+- ☐ Query Documents
 
-- Cookie Name, Cookie Options, Debug
-- (enableTokenRefreshOnExpiredKidHeader ? cookieSignatureKeys ?)
+## Firebase Storage
 
-## Then to DB, then Storage...
+- ☐ Create File
+- ☐ Delete File
+- ☐ Get File

package/dist/auth/cache-types.d.ts

@@ -0,0 +1,7 @@
+export type SetCache = <T>(name: string, value: T, ttlMs?: number) => Promise<void> | void;
+export type GetCache = <T>(name: string) => Promise<T | undefined> | T | undefined;
+export type CacheConfig = {
+    getCache: GetCache;
+    setCache: SetCache;
+};
+//# sourceMappingURL=cache-types.d.ts.map

package/dist/auth/cache-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-types.d.ts","sourceRoot":"","sources":["../../src/auth/cache-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EACrB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,CAAC,EACR,KAAK,CAAC,EAAE,MAAM,KACb,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EACrB,IAAI,EAAE,MAAM,KACX,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;CACtB,CAAC"}

package/dist/auth/cache-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cache-types.js.map

package/dist/auth/cache-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-types.js","sourceRoot":"","sources":["../../src/auth/cache-types.ts"],"names":[],"mappings":""}

package/dist/auth/cookie-types.d.ts

@@ -16,4 +16,8 @@ export type CookieOptions = Partial<{
 };
 export type GetSession = (name: string) => Promise<string | null | undefined> | string | null | undefined;
 export type SetSession = (name: string, value: string, options: CookieOptions) => Promise<void> | void;
+export type CookieConfig = {
+    getSession: GetSession;
+    saveSession: SetSession;
+};
 //# sourceMappingURL=cookie-types.d.ts.map

package/dist/auth/cookie-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie-types.d.ts","sourceRoot":"","sources":["../../src/auth/cookie-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACpC;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC;IAChC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACjD,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtB,MAAM,MAAM,UAAU,GAAG,CACrB,IAAI,EAAE,MAAM,KACX,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,KACrB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC"}
+{"version":3,"file":"cookie-types.d.ts","sourceRoot":"","sources":["../../src/auth/cookie-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACpC;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC;IAChC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACjD,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtB,MAAM,MAAM,UAAU,GAAG,CACrB,IAAI,EAAE,MAAM,KACX,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,KACrB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B,MAAM,MAAM,YAAY,GAAG;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;CAC3B,CAAC"}

package/dist/auth/firebase-admin-auth.d.ts

@@ -1,40 +1,111 @@
 import type { ServiceAccount } from './firebase-types.js';
 import { FirebaseEdgeError } from './errors.js';
+import type { CacheConfig } from './cache-types.js';
+/**
+ * Firebase Admin Authentication handler for edge environments.
+ * Provides server-side authentication operations using service account credentials.
+ */
 export declare class FirebaseAdminAuth {
     private serviceAccountKey;
     private tenantId?;
     private fetch?;
-    constructor(serviceAccountKey: ServiceAccount, tenantId?: string | undefined, fetch?: typeof globalThis.fetch | undefined);
+    private cache?;
+    private cacheName?;
+    private _cacheName;
+    /**
+     * Creates a new Firebase Admin Auth instance.
+     *
+     * @param serviceAccountKey Firebase service account credentials
+     * @param tenantId Optional tenant ID for multi-tenancy
+     * @param fetch Optional custom fetch implementation
+     * @param cache Optional cache implementation for token caching
+     * @param cacheName Optional cache key name (defaults to '__cache')
+     */
+    constructor(serviceAccountKey: ServiceAccount, tenantId?: string | undefined, fetch?: typeof globalThis.fetch | undefined, cache?: CacheConfig | undefined, cacheName?: string | undefined);
+    /**
+     * Retrieves a cached service account token or fetches a new one.
+     * Tokens are cached for 1 hour.
+     *
+     * @returns Promise with token data and error
+     */
+    private getCachedToken;
+    /**
+     * Retrieves user account information by UID.
+     *
+     * @param uid User ID to look up
+     * @returns Promise with object containing user data or null, and error if any
+     */
     getUser(uid: string): Promise<{
         data: null;
         error: FirebaseEdgeError;
     } | {
-        data: import("./firebase-types.js").UserRecord | null | undefined;
+        data: import("./firebase-types.js").UserInfo | null | undefined;
         error: null;
     }>;
+    /**
+     * Retrieves user account information by email address.
+     *
+     * @param email Email address to look up
+     * @returns Promise with object containing user data or null, and error if any
+     */
+    getUserByEmail(email: string): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: import("./firebase-types.js").UserInfo | null | undefined;
+        error: null;
+    }>;
+    /**
+     * Verifies a Firebase ID token and returns the decoded payload.
+     * Optionally checks if the token has been revoked.
+     *
+     * @param idToken Firebase ID token to verify
+     * @param checkRevoked Whether to check if token has been revoked (defaults to false)
+     * @returns Promise with object containing decoded token payload or null, and error if any
+     */
     verifyIdToken(idToken: string, checkRevoked?: boolean): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
         data: import("./firebase-types.js").FirebaseIdTokenPayload;
         error: null;
-    } | {
-        data: null;
-        error: Error;
     }>;
-    createSessionCookie(idToken: string, { expiresIn }: {
-        expiresIn: number;
-    }): Promise<{
+    /**
+     * Creates a session cookie from a Firebase ID token.
+     *
+     * @param idToken Firebase ID token to convert to session cookie
+     * @param expiresIn_ms Session cookie expiration time in milliseconds
+     * @returns Promise with object containing session cookie string or null, and error if any
+     */
+    createSessionCookie(idToken: string, expiresIn_ms: number): Promise<{
         data: null;
         error: FirebaseEdgeError;
     } | {
         data: string | null;
         error: null;
     }>;
+    /**
+     * Verifies a Firebase session cookie and returns the decoded payload.
+     * Optionally checks if the token has been revoked.
+     *
+     * @param sessionCookie Session cookie to verify
+     * @param checkRevoked Whether to check if token has been revoked (defaults to false)
+     * @returns Promise with object containing decoded session payload or null, and error if any
+     */
     verifySessionCookie(sessionCookie: string, checkRevoked?: boolean): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
         data: import("./firebase-types.js").FirebaseIdTokenPayload;
         error: null;
-    } | {
-        data: null;
-        error: Error;
     }>;
+    /**
+     * Creates a custom Firebase authentication token for a given user.
+     *
+     * @param uid User ID to create token for
+     * @param developerClaims Optional custom claims to include in the token
+     * @returns Promise with object containing custom token string or null, and error if any
+     */
     createCustomToken(uid: string, developerClaims?: object): Promise<{
         data: null;
         error: FirebaseEdgeError;

package/dist/auth/firebase-admin-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firebase-admin-auth.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EACH,iBAAiB,EAGpB,MAAM,aAAa,CAAC;AAErB,qBAAa,iBAAiB;IAEtB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,QAAQ,CAAC;IACjB,OAAO,CAAC,KAAK,CAAC;gBAFN,iBAAiB,EAAE,cAAc,EACjC,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,YAAA;IAGrC,OAAO,CAAC,GAAG,EAAE,MAAM;;;;;;;IAgDnB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,GAAE,OAAe;;;;;;;IAuG5D,mBAAmB,CACrB,OAAO,EAAE,MAAM,EACf,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;;;;;;;IAmDlC,mBAAmB,CACrB,aAAa,EAAE,MAAM,EACrB,YAAY,GAAE,OAAe;;;;;;;IA+E3B,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,GAAE,MAAW;;;;;;;CAmCpE"}
+{"version":3,"file":"firebase-admin-auth.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAuB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE/E,OAAO,EACH,iBAAiB,EAGpB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;GAGG;AACH,qBAAa,iBAAiB;IAatB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,QAAQ,CAAC;IACjB,OAAO,CAAC,KAAK,CAAC;IACd,OAAO,CAAC,KAAK,CAAC;IACd,OAAO,CAAC,SAAS,CAAC;IAhBtB,OAAO,CAAC,UAAU,CAAa;IAE/B;;;;;;;;OAQG;gBAES,iBAAiB,EAAE,cAAc,EACjC,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,YAAA,EAC/B,KAAK,CAAC,EAAE,WAAW,YAAA,EACnB,SAAS,CAAC,EAAE,MAAM,YAAA;IAK9B;;;;;OAKG;YACW,cAAc;IAoC5B;;;;;OAKG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM;;;;;;;IA+BzB;;;;;OAKG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM;;;;;;;IA+BlC;;;;;;;OAOG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,GAAE,OAAe;;;;;;;IAwGlE;;;;;;OAMG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;;;;;;;IAuC/D;;;;;;;OAOG;IACG,mBAAmB,CACrB,aAAa,EAAE,MAAM,EACrB,YAAY,GAAE,OAAe;;;;;;;IAgFjC;;;;;;OAMG;IACG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,GAAE,MAAW;;;;;;;CAmCpE"}

package/dist/auth/firebase-admin-auth.js

@@ -1,32 +1,106 @@
-import { createSessionCookie, getAccountInfoByUid } from './firebase-auth-endpoints.js';
+import { createSessionCookie, getAccountInfo } from './firebase-auth-endpoints.js';
 import { signJWTCustomToken, verifyJWT, verifySessionJWT } from './firebase-jwt.js';
 import { getToken } from './google-oauth.js';
 import { FirebaseEdgeError, FirebaseAdminAuthErrorInfo, ensureError } from './errors.js';
+/**
+ * Firebase Admin Authentication handler for edge environments.
+ * Provides server-side authentication operations using service account credentials.
+ */
 export class FirebaseAdminAuth {
     serviceAccountKey;
     tenantId;
     fetch;
-    constructor(serviceAccountKey, tenantId, fetch) {
+    cache;
+    cacheName;
+    _cacheName = '__cache';
+    /**
+     * Creates a new Firebase Admin Auth instance.
+     *
+     * @param serviceAccountKey Firebase service account credentials
+     * @param tenantId Optional tenant ID for multi-tenancy
+     * @param fetch Optional custom fetch implementation
+     * @param cache Optional cache implementation for token caching
+     * @param cacheName Optional cache key name (defaults to '__cache')
+     */
+    constructor(serviceAccountKey, tenantId, fetch, cache, cacheName) {
         this.serviceAccountKey = serviceAccountKey;
         this.tenantId = tenantId;
         this.fetch = fetch;
+        this.cache = cache;
+        this.cacheName = cacheName;
+        this._cacheName = this.cacheName || this._cacheName;
     }
-    async getUser(uid) {
-        // TODO: cache token and only refresh if expired
+    /**
+     * Retrieves a cached service account token or fetches a new one.
+     * Tokens are cached for 1 hour.
+     *
+     * @returns Promise with token data and error
+     */
+    async getCachedToken() {
+        const cachedToken = await this.cache?.getCache(this._cacheName);
+        if (cachedToken) {
+            return {
+                data: cachedToken,
+                error: null
+            };
+        }
         const { data: token, error: getTokenError } = await getToken(this.serviceAccountKey, this.fetch);
+        if (token && this.cache) {
+            // Google tokens are valid for 1 hour
+            this.cache?.setCache('token', token, 3600);
+        }
         if (getTokenError) {
             return {
                 data: null,
-                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_SERVICE_ACCOUNT_TOKEN_FAILED, { cause: getTokenError })
+                error: getTokenError
+            };
+        }
+        return {
+            data: token,
+            error: null
+        };
+    }
+    /**
+     * Retrieves user account information by UID.
+     *
+     * @param uid User ID to look up
+     * @returns Promise with object containing user data or null, and error if any
+     */
+    async getUser(uid) {
+        const { data: token, error: tokenError } = await this.getCachedToken();
+        if (tokenError) {
+            return {
+                data: null,
+                error: tokenError
             };
         }
-        if (!token) {
+        const { data, error } = await getAccountInfo({ uid }, token.access_token, this.serviceAccountKey.project_id, this.tenantId, this.fetch);
+        if (error) {
+            return {
+                data: null,
+                error
+            };
+        }
+        return {
+            data,
+            error: null
+        };
+    }
+    /**
+     * Retrieves user account information by email address.
+     *
+     * @param email Email address to look up
+     * @returns Promise with object containing user data or null, and error if any
+     */
+    async getUserByEmail(email) {
+        const { data: token, error: tokenError } = await this.getCachedToken();
+        if (tokenError) {
             return {
                 data: null,
-                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_NO_TOKEN_RETURNED)
+                error: tokenError
             };
         }
-        const { data, error } = await getAccountInfoByUid(uid, token.access_token, this.serviceAccountKey.project_id, this.tenantId, this.fetch);
+        const { data, error } = await getAccountInfo({ email }, token.access_token, this.serviceAccountKey.project_id, this.tenantId, this.fetch);
         if (error) {
             return {
                 data: null,
@@ -38,6 +112,14 @@ export class FirebaseAdminAuth {
             error: null
         };
     }
+    /**
+     * Verifies a Firebase ID token and returns the decoded payload.
+     * Optionally checks if the token has been revoked.
+     *
+     * @param idToken Firebase ID token to verify
+     * @param checkRevoked Whether to check if token has been revoked (defaults to false)
+     * @returns Promise with object containing decoded token payload or null, and error if any
+     */
     async verifyIdToken(idToken, checkRevoked = false) {
         const { data: decodedIdToken, error: verifyError } = await verifyJWT(idToken, this.serviceAccountKey.project_id, this.fetch);
         if (verifyError) {
@@ -58,8 +140,11 @@ export class FirebaseAdminAuth {
             if (tokenTenantId !== this.tenantId) {
                 return {
                     data: null,
-                    error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_ID_TOKEN_VERIFY_FAILED, {
-                        cause: new Error(`Token tenant ID '${tokenTenantId}' does not match expected '${this.tenantId}'`)
+                    error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_TENANT_ID_INVALID, {
+                        context: {
+                            tokenTenantId,
+                            expectedTenantId: this.tenantId
+                        }
                     })
                 };
             }
@@ -74,13 +159,13 @@ export class FirebaseAdminAuth {
         if (userError) {
             return {
                 data: null,
-                error: new Error(`Failed to get user: ${userError.message}`)
+                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_USER_LOOKUP_FAILED, { cause: ensureError(userError) })
             };
         }
         if (!user) {
             return {
                 data: null,
-                error: new Error('No user record found!')
+                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_USER_RECORD_NOT_FOUND)
             };
         }
         if (user.disabled) {
@@ -89,13 +174,10 @@ export class FirebaseAdminAuth {
                 error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_USER_DISABLED)
             };
         }
-        if (user.tokensValidAfterTime) {
-            // Get the ID token authentication time and convert to milliseconds UTC.
-            const authTimeUtc = decodedIdToken.auth_time * 1000;
-            // Get user tokens valid after time in milliseconds UTC.
-            const validSinceUtc = new Date(user.tokensValidAfterTime).getTime();
-            // Check if authentication time is older than valid since time.
-            if (authTimeUtc < validSinceUtc) {
+        if (user.validSince) {
+            const validSinceSeconds = Number(user.validSince);
+            const authTimeSeconds = decodedIdToken.auth_time;
+            if (authTimeSeconds < validSinceSeconds) {
                 return {
                     data: null,
                     error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_ID_TOKEN_REVOKED)
@@ -107,21 +189,22 @@ export class FirebaseAdminAuth {
             error: null
         };
     }
-    async createSessionCookie(idToken, { expiresIn }) {
-        const { data: token, error: getTokenError } = await getToken(this.serviceAccountKey, this.fetch);
+    /**
+     * Creates a session cookie from a Firebase ID token.
+     *
+     * @param idToken Firebase ID token to convert to session cookie
+     * @param expiresIn_ms Session cookie expiration time in milliseconds
+     * @returns Promise with object containing session cookie string or null, and error if any
+     */
+    async createSessionCookie(idToken, expiresIn_ms) {
+        const { data: token, error: getTokenError } = await this.getCachedToken();
         if (getTokenError) {
             return {
                 data: null,
                 error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_SERVICE_ACCOUNT_TOKEN_FAILED, { cause: getTokenError })
             };
         }
-        if (!token) {
-            return {
-                data: null,
-                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_NO_TOKEN_RETURNED)
-            };
-        }
-        const { data, error } = await createSessionCookie(idToken, token.access_token, this.serviceAccountKey.project_id, expiresIn, this.tenantId, this.fetch);
+        const { data, error } = await createSessionCookie(idToken, token.access_token, this.serviceAccountKey.project_id, expiresIn_ms, this.tenantId, this.fetch);
         if (error) {
             return {
                 data: null,
@@ -133,6 +216,14 @@ export class FirebaseAdminAuth {
             error: null
         };
     }
+    /**
+     * Verifies a Firebase session cookie and returns the decoded payload.
+     * Optionally checks if the token has been revoked.
+     *
+     * @param sessionCookie Session cookie to verify
+     * @param checkRevoked Whether to check if token has been revoked (defaults to false)
+     * @returns Promise with object containing decoded session payload or null, and error if any
+     */
     async verifySessionCookie(sessionCookie, checkRevoked = false) {
         const { data, error } = await verifySessionJWT(sessionCookie, this.serviceAccountKey.project_id, this.fetch);
         if (error) {
@@ -144,9 +235,7 @@ export class FirebaseAdminAuth {
         if (!data) {
             return {
                 data: null,
-                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_SESSION_COOKIE_VERIFY_FAILED, {
-                    cause: new Error('No data returned from session cookie verification')
-                })
+                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_SESSION_COOKIE_VERIFY_FAILED)
             };
         }
         // Validate tenant ID if specified
@@ -155,8 +244,11 @@ export class FirebaseAdminAuth {
             if (tokenTenantId !== this.tenantId) {
                 return {
                     data: null,
-                    error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_SESSION_COOKIE_VERIFY_FAILED, {
-                        cause: new Error(`Token tenant ID '${tokenTenantId}' does not match expected '${this.tenantId}'`)
+                    error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_TENANT_ID_INVALID, {
+                        context: {
+                            tokenTenantId,
+                            expectedTenantId: this.tenantId
+                        }
                     })
                 };
             }
@@ -171,13 +263,13 @@ export class FirebaseAdminAuth {
         if (userError) {
             return {
                 data: null,
-                error: new Error(`Failed to get user: ${userError.message}`)
+                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_USER_LOOKUP_FAILED, { cause: ensureError(userError) })
             };
         }
         if (!user) {
             return {
                 data: null,
-                error: new Error('No user record found!')
+                error: new FirebaseEdgeError(FirebaseAdminAuthErrorInfo.ADMIN_USER_RECORD_NOT_FOUND)
             };
         }
         return {
@@ -185,6 +277,13 @@ export class FirebaseAdminAuth {
             error: null
         };
     }
+    /**
+     * Creates a custom Firebase authentication token for a given user.
+     *
+     * @param uid User ID to create token for
+     * @param developerClaims Optional custom claims to include in the token
+     * @returns Promise with object containing custom token string or null, and error if any
+     */
     async createCustomToken(uid, developerClaims = {}) {
         const claims = this.tenantId
             ? { ...developerClaims, tenant_id: this.tenantId }

package/dist/auth/firebase-admin-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"firebase-admin-auth.js","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,mBAAmB,EACnB,mBAAmB,EACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,WAAW,EACd,MAAM,aAAa,CAAC;AAErB,MAAM,OAAO,iBAAiB;IAEd;IACA;IACA;IAHZ,YACY,iBAAiC,EACjC,QAAiB,EACjB,KAA+B;QAF/B,sBAAiB,GAAjB,iBAAiB,CAAgB;QACjC,aAAQ,GAAR,QAAQ,CAAS;QACjB,UAAK,GAAL,KAAK,CAA0B;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,GAAW;QACrB,gDAAgD;QAEhD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CACxD,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,aAAa,EAAE,CAC3B;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,uBAAuB,CACrD;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAC7C,GAAG,EACH,KAAK,CAAC,YAAY,EAClB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,eAAwB,KAAK;QAC9D,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAChE,OAAO,EACP,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,4BAA4B,EACvD,EAAE,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE,CACtC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,4BAA4B,CAC1D;aACJ,CAAC;QACN,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC;YACtD,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,4BAA4B,EACvD;wBACI,KAAK,EAAE,IAAI,KAAK,CACZ,oBAAoB,aAAa,8BAA8B,IAAI,CAAC,QAAQ,GAAG,CAClF;qBACJ,CACJ;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACvD,cAAc,CAAC,GAAG,CACrB,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,uBAAuB,SAAS,CAAC,OAAO,EAAE,CAAC;aAC/D,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,uBAAuB,CAAC;aAC5C,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,mBAAmB,CACjD;aACJ,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,wEAAwE;YACxE,MAAM,WAAW,GAAG,cAAe,CAAC,SAAS,GAAG,IAAI,CAAC;YAErD,wDAAwD;YACxD,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;YAEpE,+DAA+D;YAE/D,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;gBAC9B,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,sBAAsB,CACpD;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO;YACH,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,OAAe,EACf,EAAE,SAAS,EAAyB;QAEpC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CACxD,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,aAAa,EAAE,CAC3B;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,uBAAuB,CACrD;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAC7C,OAAO,EACP,KAAK,CAAC,YAAY,EAClB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,SAAS,EACT,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,aAAqB,EACrB,eAAwB,KAAK;QAE7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAC1C,aAAa,EACb,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D;oBACI,KAAK,EAAE,IAAI,KAAK,CACZ,mDAAmD,CACtD;iBACJ,CACJ;aACJ,CAAC;QACN,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC5C,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D;wBACI,KAAK,EAAE,IAAI,KAAK,CACZ,oBAAoB,aAAa,8BAA8B,IAAI,CAAC,QAAQ,GAAG,CAClF;qBACJ,CACJ;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI;gBACJ,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC,GAAG,CAAC,CAAC;QAEvE,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,uBAAuB,SAAS,CAAC,OAAO,EAAE,CAAC;aAC/D,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,uBAAuB,CAAC;aAC5C,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,kBAA0B,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;YACxB,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;YAClD,CAAC,CAAC,eAAe,CAAC;QAEtB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,kBAAkB,CAC5C,GAAG,EACH,IAAI,CAAC,iBAAiB,EACtB,MAAM,CACT,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,gCAAgC,EAC3D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,0BAA0B,CACxD;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;CACJ"}
+{"version":3,"file":"firebase-admin-auth.js","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,mBAAmB,EACnB,cAAc,EACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAqB,MAAM,mBAAmB,CAAC;AAChE,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,WAAW,EACd,MAAM,aAAa,CAAC;AAGrB;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAad;IACA;IACA;IACA;IACA;IAhBJ,UAAU,GAAG,SAAS,CAAC;IAE/B;;;;;;;;OAQG;IACH,YACY,iBAAiC,EACjC,QAAiB,EACjB,KAA+B,EAC/B,KAAmB,EACnB,SAAkB;QAJlB,sBAAiB,GAAjB,iBAAiB,CAAgB;QACjC,aAAQ,GAAR,QAAQ,CAAS;QACjB,UAAK,GAAL,KAAK,CAA0B;QAC/B,UAAK,GAAL,KAAK,CAAc;QACnB,cAAS,GAAT,SAAS,CAAS;QAE1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,cAAc;QACxB,MAAM,WAAW,GACb,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,CACtB,IAAI,CAAC,UAAU,CAClB,CAAC;QAEN,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CACxD,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,qCAAqC;YACrC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,aAAa;aACvB,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW;QACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEvE,IAAI,UAAU,EAAE,CAAC;YACb,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,UAAU;aACpB,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CACxC,EAAE,GAAG,EAAE,EACP,KAAM,CAAC,YAAY,EACnB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,KAAa;QAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEvE,IAAI,UAAU,EAAE,CAAC;YACb,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,UAAU;aACpB,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CACxC,EAAE,KAAK,EAAE,EACT,KAAK,CAAC,YAAY,EAClB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,eAAwB,KAAK;QAC9D,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAChE,OAAO,EACP,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,4BAA4B,EACvD,EAAE,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE,CACtC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,4BAA4B,CAC1D;aACJ,CAAC;QACN,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC;YACtD,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,uBAAuB,EAClD;wBACI,OAAO,EAAE;4BACL,aAAa;4BACb,gBAAgB,EAAE,IAAI,CAAC,QAAQ;yBAClC;qBACJ,CACJ;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACvD,cAAc,CAAC,GAAG,CACrB,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,wBAAwB,EACnD,EAAE,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CACpC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,2BAA2B,CACzD;aACJ,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,mBAAmB,CACjD;aACJ,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,eAAe,GAAG,cAAe,CAAC,SAAS,CAAC;YAElD,IAAI,eAAe,GAAG,iBAAiB,EAAE,CAAC;gBACtC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,sBAAsB,CACpD;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO;YACH,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe,EAAE,YAAoB;QAC3D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,GACvC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEhC,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,aAAa,EAAE,CAC3B;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAC7C,OAAO,EACP,KAAK,CAAC,YAAY,EAClB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,YAAY,EACZ,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CACrB,aAAqB,EACrB,eAAwB,KAAK;QAE7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAC1C,aAAa,EACb,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,EAC7D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,kCAAkC,CAChE;aACJ,CAAC;QACN,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC5C,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,uBAAuB,EAClD;wBACI,OAAO,EAAE;4BACL,aAAa;4BACb,gBAAgB,EAAE,IAAI,CAAC,QAAQ;yBAClC;qBACJ,CACJ;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI;gBACJ,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEtE,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,wBAAwB,EACnD,EAAE,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CACpC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,2BAA2B,CACzD;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,kBAA0B,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;YACxB,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;YAClD,CAAC,CAAC,eAAe,CAAC;QAEtB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,kBAAkB,CAC5C,GAAG,EACH,IAAI,CAAC,iBAAiB,EACtB,MAAM,CACT,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,gCAAgC,EAC3D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,0BAA0B,CAAC,0BAA0B,CACxD;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;CACJ"}